Obsolete Releases > SME 8.x Contribs

domain admin and "local" admin privileges

(1/3) > >>

mophilly:
In the documentation there is a description on how to create an admin group. In the description it says
--- Quote ---When users who are members of this group next log in to a Windows workstation that is joined to the SME Server domain, they will have Local Administrator rights automatically.
--- End quote ---

I do not need to administer workstations. FTR, there are Windows, Mac and Linux workstations in the LAN.

I would like to delegate system admin responsibilities to another person in my group. We need to have at least two people able to run software updates, assign user permissions and so on, on the SME systems. I prefer to "bless" selected accounts rather than share root credentials.

Will setting up a "domain admins" group as described accomplish this?

If not, would using "plain old" linux commands to amend the appropriate group membership cause problems with SME updates later on?

janet:
Mophilly

That applies to Windows workstations as it clearly says (ie login to Windows).

You want to install smeserver  user manager by doing
yum install --enablerepo=smecontribs smeserver-userpanel
(all on one line)

IIRC some other dependencies will be installed
Then log in to server manager and setup which users have access to which panels, then the user(s) can log in to user panel with their own login name & perform the admin level functions
https://yourdomain/user-manager

mophilly:
Thank you, mary.

Setting aside my concern about unwanted access to local windows systems, I installed the package in SME 8.0 beta. Seems to work fine and allows a fair portion what I am seeking. Unfortunately, it doesn't cover all of the problem I need to resolve.

As a polite suggestion, the documentation team might consider placing Windows specific instructions under Windows specific headings. In this case, the quote is in a section called "Setting admin rights". I would have skipped it entirely if the heading was "Setting Windows admin rights".

janet:
Mophilly


--- Quote ---I installed the package in SME 8.0 beta. Seems to work fine and allows a fair portion what I am seeking. Unfortunately, it doesn't cover all of the problem I need to resolve.
--- End quote ---

Assume you mean smeserver-userpanel ?
It does everything that server manager does, so what does it not resolve for you ?


--- Quote ---In this case, the quote is in a section called "Setting admin rights". I would have skipped it entirely if the heading was "Setting Windows admin rights".
--- End quote ---

There are lot's of documentation on wiki !
Please provide link to the exact location if you want something fixed.
The best way to effect/request changes is to lodge a bug report, against the wiki category rather than a bug with SME. If you post such things in the forum then someone else will still need to read it and have the inclination to post the details as a bug report anyway. Thanks.

mophilly:
Oh, sorry... too many interruptions today.

Yes, I was writing about smeserver-userpanel.

It does allows access to yum, logs and groups, among other things. All good, and most certainly will allow me to delegate the bulk of the admin tasks. I have on my list a couple of things that are in the area of basic server configuration. Updating the db properties for custom iBay configs to isolate upload dir's is one example. Adding new contribs is on that list too.

Regarding submitting a fault report for doc updates... you are right and I should know better than put that sort of comment here. I apologize for not doing so in the first place.

The suggestion is now logged as bug 6934; http://bugs.contribs.org/show_bug.cgi?id=6934

Navigation

[0] Message Index

[#] Next page